This project forked from maskhe/javasec
自己学习java安全的一些总结，主要是安全审计相关
License: MIT License
这是我在学习java安全审计的一些总结，每篇文章可能都不会很长，可能就只是讲一个知识点，但是文章越短，我才越容易坚持下去把这系列文章写完～
本系列文章不求把每个细节都覆盖到，但求把提到的每个知识点用通俗易懂的话阐述出来
文章体系规划(待完善）：
常见的pop gadgets以及一些反序列化漏洞案例
apache commons-collections中的反序列化利用链
结合自己写的demo以及真实漏洞案例
几句话讲解原理，再结合几个真实漏洞案例：fastjson、spring的jndi注入案例
几种常见的解析xml的jar包，以及他们的漏洞点，防御手法
Weblogic之XMLDecoder反序列化1（CVE-2017-3506)
主要是各种方法，各个jar包
weblogic系列、spring系列、fastjson系列、jackson系列、solr、jboss、tomcat、struts2....
此部分内容虽是基础知识，但是对于漏洞挖掘也许并无多大助益，我在写作的过程中也只挑了我关注的内容，像jvm垃圾收集及调优部分内容就被我舍弃了
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
Django
The Web framework for perfectionists with deadlines.
Laravel
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
Microsoft
Open source projects and samples from Microsoft.
Google
Google ❤️ Open Source for everyone.
Alibaba
Alibaba Open Source for everyone
D3
Data-Driven Documents codes.
Tencent
China tencent open source team.
